diff --git a/en/azure/appservice/identity-enabled.md b/en/azure/appservice/identity-enabled.md index 349827987..959fc7298 100644 --- a/en/azure/appservice/identity-enabled.md +++ b/en/azure/appservice/identity-enabled.md @@ -15,13 +15,12 @@ | **Recommended Action** | Enable system or user-assigned identities for all App Services and avoid storing credentials in code. | ## Detailed Remediation Steps - 1. Log into the Microsoft Azure Management Console. -2. Select the "Search resources, services, and docs" option at the top and search for App Services.
-3. Select the "App Services" by clicking on the "Name" link to access the configuration changes.
+2. Find the search bar at the top and search for App Services.
+3. Select the "App Service" by clicking on "Name" to go to its configuration.
4. Scroll down the selected "App Services" navigation panel and in "Settings" click on the "Identity" option.
-5. On the "Identity" page verify the "Status" option under "System assigned" tab. Is the "Status" is set to "Off" then the "Identity" is not enabled to authenticate to App Service without storing credentials in the code.
-6. Repeat steps number 2 - 5 to verify other "Apps" Identity status in the account.
-7. Navigate to the "App Services", select the "App Service" and click on the "Name" as a link to access the configuration, select the "Identity" under "Settings."
-8. On the "System assigned" page scroll down and select the "On" option next to "Status" and click on the "Save" button to ensure identity is authenticated to all services that supports Azure AD authentication, without having to include any credentials in code.
-9. Repeat above steps to ensures a system or user assigned managed identity is enabled to authenticate to App Service without storing credentials in the code.
+5. On the "Identity" page verify the "Status" option under "System assigned" tab. If the "Status" is set to "Off" then the "Identity" is not enabled to authenticate to App Service without storing credentials in the code. It is recommended to use Identity management to store credentials for other services such as Storage, SQL etc.
+6. If the "Status" is set to "Off" then select the "On" option next to "Status" to turn on Identity management.
+7. Click on the "Save" button at the top to ensure identity is authenticated to all services that supports Azure AD authentication, without having to include any credentials in code.
+8. Click "Yes" in the confirmation popup to complete the change.
+9. Repeat steps 3 - 8 to ensure a system or user assigned managed identity is enabled for all "App services" in the account.
diff --git a/resources/azure/appservice/identity-enabled/step2.png b/resources/azure/appservice/identity-enabled/step2.png index 5add97bac..67c42c979 100644 Binary files a/resources/azure/appservice/identity-enabled/step2.png and b/resources/azure/appservice/identity-enabled/step2.png differ diff --git a/resources/azure/appservice/identity-enabled/step3.png b/resources/azure/appservice/identity-enabled/step3.png index 367880a1a..41b532e86 100644 Binary files a/resources/azure/appservice/identity-enabled/step3.png and b/resources/azure/appservice/identity-enabled/step3.png differ diff --git a/resources/azure/appservice/identity-enabled/step4.png b/resources/azure/appservice/identity-enabled/step4.png index 7af56e74d..bca2728f3 100644 Binary files a/resources/azure/appservice/identity-enabled/step4.png and b/resources/azure/appservice/identity-enabled/step4.png differ diff --git a/resources/azure/appservice/identity-enabled/step5.png b/resources/azure/appservice/identity-enabled/step5.png index c14464e69..e64191284 100644 Binary files a/resources/azure/appservice/identity-enabled/step5.png and b/resources/azure/appservice/identity-enabled/step5.png differ diff --git a/resources/azure/appservice/identity-enabled/step6.png b/resources/azure/appservice/identity-enabled/step6.png new file mode 100644 index 000000000..75781426e Binary files /dev/null and b/resources/azure/appservice/identity-enabled/step6.png differ diff --git a/resources/azure/appservice/identity-enabled/step7.png b/resources/azure/appservice/identity-enabled/step7.png deleted file mode 100644 index 149dd9119..000000000 Binary files a/resources/azure/appservice/identity-enabled/step7.png and /dev/null differ diff --git a/resources/azure/appservice/identity-enabled/step8.png b/resources/azure/appservice/identity-enabled/step8.png index 4bcd09c21..b9c1a3e54 100644 Binary files a/resources/azure/appservice/identity-enabled/step8.png and b/resources/azure/appservice/identity-enabled/step8.png differ